TL;DR Two Linux kernel flaws now have public proof-of-concept exploit code and full technical write-ups. Bad Epoll (CVE-2026-46242) lets an unprivileged user gain root. A second bug, CVE-2026-5336…

TL;DR Bad Epoll is a Linux kernel use-after-free that turns any unprivileged user into root. It is tracked as CVE-2026-46242 and also reaches Android. Researcher Jaeyoung Chung has now published t…

Artificial intelligence now hunts vulnerabilities far faster than human security researchers. In recent months, AI models have uncovered high-severity flaws across many well-known projects. The Li…

European cloud provider OVH just published a candid retrospective on its emergency patch campaign. The post explains how it fixed a KVM virtualization flaw in under ten days. The scale was enormou…

TL;DR Qualys disclosed RefluXFS on July 22, 2026. Tracked as CVE-2026-64600, it is a Linux kernel XFS privilege escalation to root. Qualys estimates the flaw potentially affects more than 16.4 mil…

Unmasking the RefluXFS Vulnerability Impervious defense mechanisms in Linux offer no sanctuary when critical vulnerabilities manifest at the filesystem layer itself. The newly identified RefluXFS …

TL;DR The OVSwrap local root flaw lets an unprivileged user gain root on many Linux systems. It affects the kernel’s Open vSwitch datapath and carries the ID CVE-2026-64531. Researcher Asim …

A researcher has published full technical details and working proof-of-concept code for a Linux kernel vulnerability named Fraggap. Tracked as CVE-2026-53362, the bug lives in the kernel’s U…

The Clash Between Safety Classifiers and Vulnerability Research Protective mechanisms in advanced AI models aim to hinder malicious actors. However, excessive safety restrictions can also halt leg…

The Debian project has published security advisory DSA-6405-1, delivering a new Linux kernel update for Debian 13. The update resolves a total of 68 kernel vulnerabilities. Their impact spans loca…

TL;DR A new Linux kernel vulnerability, tracked as CVE-2026-53264, lets a local user run arbitrary code and escalate to root. The flaw sits in the net/sched packet scheduler and comes from a use-a…

Users of anonymous operating systems typically rely on the guarantee that no single program running within the environment can betray their true identity. Sometimes, however, a solitary flaw in th…

TL;DR A Linux kernel use-after-free in SCTP, tracked as CVE-2026-64564, allows local attackers to gain root. Researchers demonstrated privilege escalation and container-to-host escape on five dist…

The Tails project shipped Tails 7.10.1 as an emergency release on August 5, 2026. This update addresses two critical security flaws – one in the Linux kernel and one in the expat XML library…

TL;DR Security researcher Hyunwoo Kim (@v4bel) disclosed a KVM escape vulnerability named Zapscape. Tracked as CVE-2026-64561, it lets a guest break out to the host. The attacker can then run comm…

TL;DR A Linux kernel eventpoll flaw lets a local user climb to root. Tracked as CVE-2026-43074, it scores 7.3 on CVSS. Researchers confirmed a working root shell on a Pixel 10 Pro. The full detail…

TL;DR A Linux kernel CPU timer flaw lets a local user reach root. Tracked as CVE-2026-64560, it scores 7.0 on CVSS. Researchers confirmed a root shell on a Pixel 10 Pro. The full details and proof…

TL;DR A researcher published full technical details and working proof-of-concept exploit code for CVE-2026-64582. The flaw is a use-after-free in the Linux kernel RDMA/rxe driver. It started as a …